# Support for OpenSSL Providers in mender
**URL:** https://hub.mender.io/t/support-for-openssl-providers-in-mender/6215
**Category:** General Discussions
**Created:** [September 24, 2023, 10:56pm UTC](https://hub.mender.io/t/support-for-openssl-providers-in-mender/6215 "2023-09-24T22:56:05Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@GowthamSK](https://hub.mender.io/u/GowthamSK)
#### Post date: [September 24, 2023, 10:56pm UTC](https://hub.mender.io/t/support-for-openssl-providers-in-mender/6215/1 "2023-09-24T22:56:05Z")
As part of configuring mender to use hardware-backed keys ([Security | Mender documentation](https://docs.mender.io/3.6/overview/security#hardware-security)), we are looking to use a new OpenSSL engine.
But OpenSSL 1.1.1 has reached End of Life on September 11th and won’t be receiving updates.
> **[OpenSSL 1.1.1 End of Life - OpenSSL Blog](https://www.openssl.org/blog/blog/2023/09/11/eol-111/)**
>
> OpenSSL 1.1.1 series has reached its End of Life (EOL).
> As such it will no longer receive publicly available security fixes. OpenSSL 1.1.1 was …
As mentioned in OpenSSL 3.0 migration guide, Engines are no longer supported in OpenSSL 3.0 and have been replaced by OpenSSL providers. ([/docs/manmaster/man7/migration\_guide.html](https://www.openssl.org/docs/manmaster/man7/migration_guide.html)).
I briefly reviewed the Mender client code and it seems like the client uses OpenSSL engines. Can you please tell me if there are plans to add support for OpenSSL Providers in place of Engines in the near future?
---
### Author:  [@kacf](https://hub.mender.io/u/kacf)
#### Post date: [September 25, 2023, 7:12am UTC](https://hub.mender.io/t/support-for-openssl-providers-in-mender/6215/2 "2023-09-25T07:12:05Z")
There are plans yes, but it will only be part of the new [C++ rewrite](https://hub.mender.io/t/mender-to-rewrite-client-using-c-and-retain-go-for-its-backend/5332). The Golang client is not going to receive any more features apart from bug fixes.
---
### Author:  [@GowthamSK](https://hub.mender.io/u/GowthamSK)
#### Post date: [September 25, 2023, 8:08am UTC](https://hub.mender.io/t/support-for-openssl-providers-in-mender/6215/3 "2023-09-25T08:08:24Z")
Thanks for the information @kacf
Can you please provide information on the rough timeline by when we could see the OpenSSL providers feature in the new C++ client? We need to make a decision on either writing an OpenSSL engine for now or a provider directly, based on the timeline. 😄
---
### Author:  [@kacf](https://hub.mender.io/u/kacf)
#### Post date: [September 25, 2023, 8:35am UTC](https://hub.mender.io/t/support-for-openssl-providers-in-mender/6215/4 "2023-09-25T08:35:03Z")
I can’t provide a hard timeline, but the goal is to try to finalize the project in October, with hopefully a release either in late October or in November.
---
### Author:  [@GowthamSK](https://hub.mender.io/u/GowthamSK)
#### Post date: [September 25, 2023, 8:53am UTC](https://hub.mender.io/t/support-for-openssl-providers-in-mender/6215/5 "2023-09-25T08:53:55Z")
This info is helpful. Thank you.
---
### Author:  [@mirzak](https://hub.mender.io/u/mirzak)
#### Post date: [November 15, 2023, 1:03pm UTC](https://hub.mender.io/t/support-for-openssl-providers-in-mender/6215/6 "2023-11-15T13:03:05Z")
Came across this problem as well.
It is November now, what is the status of C++ client release? 🙂
I noticed there is a recipe for it at [https://github.com/mendersoftware/meta-mender/blob/feature-c%2B%2B-client/meta-mender-core/recipes-mender/mender-client/mender\_3.99.0%2Breally4.0.0-alpha1.bb](https://github.com/mendersoftware/meta-mender/blob/feature-c%2B%2B-client/meta-mender-core/recipes-mender/mender-client/mender_3.99.0%2Breally4.0.0-alpha1.bb). Something worth testing?
---
### Author:  [@kacf](https://hub.mender.io/u/kacf)
#### Post date: [November 15, 2023, 1:32pm UTC](https://hub.mender.io/t/support-for-openssl-providers-in-mender/6215/7 "2023-11-15T13:32:59Z")
That one is getting quite old by now, however you can try the latest from the development branch. Obviously this is not streamlined, since we are in the process of preparing for release right now. But here’s what you can try:
1. Start with the branch from [this pull request](https://github.com/mendersoftware/meta-mender/pull/2001), since it fixes many issues. I’m working on this as we speak, so I may push more changes there.
2. Put these lines in `local.conf`:
```auto
PREFERRED_VERSION_mender = "feature-c++-client-git%"
PREFERRED_VERSION_mender-flash = "master-git%"
SRC_URI:pn-mender = "gitsm://github.com/mendersoftware/mender;protocol=https;branch=feature-c++-client"
SRC_URI:pn-mender-native = "gitsm://github.com/mendersoftware/mender;protocol=https;branch=feature-c++-client"
```
Actually I’m not sure if the last two lines are needed, but I don’t have time to check it right now.
That will give you the freshest of the fresh, so your mileage may vary. But let me know how it goes!